Introduce KEYSTORE_FLAG_CRITICAL_TO_DEVICE_ENCRYPTION
am: 67899de5ad

Change-Id: I2d0e660090f84b9a63bad5e4de57538319c99a4b